New upstream for jumpnbump, upcoming release 1.60 and call for help

[Rémi Verschelde]

Hi Ansgar, Fabian and the Debian Games team,

Writing to you as you are the maintainers of the jumpnbump package on
Debian [0], which Côme Chilliet (MCMic) and I recently resurrected on
GitLab [1]. Our fork is the most advanced jumpnbump code base, and we
intend to become the reference upstream project.

We are preparing a 1.60 release, whose main features are a port to
SDL2, various cleanups and packaging improvements [2]. We reviewed
existing Debian patches [3], and most were either merged or superseded
by our own developments (there are two I plan to review in detail
tonight, as they seem still partly relevant).

The last outstanding issue that we want to fix before the 1.60 release
is the unsafe handling of temporary files ([4], debian#500611 [5]),
which Ansgar patched in 2008. As your patch breaks the Windows
support, we can't merge it as is, and so far we don't fully understand
the security issues it is addressing, so we would welcome your help to
merge a cross-platform fix upstream.

We would be glad to work together with you to make the upcoming 1.60
release a sane base for the new upstream project to build upon, and
ensure Debian can upgrade its package to it without hassle.
If there are outstanding upstream bugs in the Debian tracker, do not
hesitate to open tickets on our GitLab repository [1].

Librement,
Rémi Verschelde / Akien

[0] https://packages.debian.org/sid/jumpnbump
[1] https://gitlab.com/LibreGames/jumpnbump
[2] https://gitlab.com/LibreGames/jumpnbump/blob/master/ChangeLog
[3] https://gitlab.com/LibreGames/jumpnbump/issues/3#note_29751030
[4] https://gitlab.com/LibreGames/jumpnbump/issues/19
[5] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=500611